CVE-2007-4778: SQL Injection
Multiple SQL injection vulnerabilities in the content component (comcontent) in Joomla! 1.5 Beta1, Beta2, and RC1 allow remote attackers to execute arbitrary SQL commands via the filter parameter in an archive action to (1) archive.php, (2) category.php, or (3) section.php in models/. NOTE: this may be the same as CVE-2007-4777.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4778?
CVE-2007-4778 is considered a medium to high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2007-4778?
To mitigate CVE-2007-4778, upgrade Joomla to a version that is not affected, such as any version newer than 1.5.0_RC1.
What versions of Joomla are affected by CVE-2007-4778?
CVE-2007-4778 affects Joomla versions 1.5.0_beta1, 1.5.0_beta2, and 1.5.0_RC1.
What types of attacks are possible due to CVE-2007-4778?
CVE-2007-4778 allows remote attackers to execute arbitrary SQL commands, potentially compromising the database.
Is there a known exploit for CVE-2007-4778?
Yes, there are known exploits that demonstrate the SQL injection vulnerabilities present in CVE-2007-4778.